Package Health

ng2-pdfjs-viewer

The most comprehensive Angular PDF viewer, powered by Mozilla PDF.js 6 — view, annotate, sign, fill forms, search, and read aloud from one component. 9M+ downloads, mobile-first, production-ready.

Latest 26.4.4NPMNPM

88%

Total Score

healthy

Healthy, with concentrated maintenance as the main caveat.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

One contributor made 90% of the recent commits, creating a real concentration risk, although a second contributor remains active and the repository is organization-owned.

Workflow auditcaution

All six workflows were analyzed successfully, all 13 action references are pinned, and five workflows use read-only permissions. One workflow has top-level write permissions, while the sole cache-poisoning finding is low confidence and has no untrusted trigger or checkout sink, so this is only a minor hygiene concern.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10243
ng2-pdfjs-viewer is vulnerable to Cross-site Scripting (XSS) in all versions.
0.0.0 - *
High

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
tslib
Version ^2.3.0
—
—

Weekly Downloads

Info

Last Published
11 days ago
Created
8 years ago
Unpacked Size
8.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform